refactor action inputs (#14)

Signed-off-by: Brian DeHamer <bdehamer@github.com>
This commit is contained in:
Brian DeHamer 2024-02-29 11:57:49 -08:00 committed by GitHub
parent ee7eb81981
commit fec1f1e733
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 18 additions and 53 deletions

View File

@ -39,14 +39,8 @@ outputs:
runs:
using: 'composite'
steps:
- uses: actions/attest-build-provenance/generate-build-provenance-statement@main
id: generate-build-provenance-statement
with:
github-token: ${{ inputs.github-token }}
subject-path: ${{ inputs.subject-path }}
subject-digest: ${{ inputs.subject-digest }}
subject-name: ${{ inputs.subject-name }}
push-to-registry: ${{ inputs.push-to-registry }}
- uses: actions/attest-build-provenance/generate-build-provenance-predicate@input-refactor
id: generate-build-provenance-predicate
- uses: actions/attest@main
id: attest
with:
@ -55,5 +49,5 @@ runs:
subject-digest: ${{ inputs.subject-digest }}
subject-name: ${{ inputs.subject-name }}
push-to-registry: ${{ inputs.push-to-registry }}
predicate-type: ${{ steps.generate-build-provenance-statement.outputs.predicate-type }}
predicate: ${{ steps.generate-build-provenance-statement.outputs.predicate }}
predicate-type: ${{ steps.generate-build-provenance-predicate.outputs.predicate-type }}
predicate: ${{ steps.generate-build-provenance-predicate.outputs.predicate }}

View File

@ -0,0 +1,14 @@
name: 'Generate Build Provenance Statement'
description: 'Generate provenance statement for build artifacts'
author: 'GitHub'
outputs:
predicate:
description: >
The JSON-serialized of the attestation predicate.
predicate-type:
description: >
URI identifying the type of the predicate.
runs:
using: node20
main: ../dist/index.js

View File

@ -1,43 +0,0 @@
name: 'Generate Build Provenance Statement'
description: 'Generate provenance statement for build artifacts'
author: 'GitHub'
inputs:
github-token:
description: >
The GitHub token used to make authenticated API requests.
default: ${{ github.token }}
required: false
subject-path:
description: >
Path to the artifact for which provenance will be generated. Must specify
exactly one of "subject-path" or "subject-digest".
required: false
subject-digest:
description: >
Digest of the subject for which provenance will be generated. Must be in
the form "algorithm:hex_digest" (e.g. "sha256:abc123..."). Must specify
exactly one of "subject-path" or "subject-digest".
required: false
subject-name:
description: >
Subject name as it should appear in the provenance statement. Required
unless "subject-path" is specified, in which case it will be inferred from
the path.
push-to-registry:
description: >
Whether to push the provenance statement to the image registry. Requires
that the "subject-name" parameter specify the fully-qualified image name
and that the "subject-digest" parameter be specified. Defaults to false.
default: false
required: false
outputs:
predicate:
description: >
The JSON-serialized of the attestation predicate.
predicate-type:
description: >
URI identifying the type of the predicate.
runs:
using: node20
main: ../dist/index.js